---
title: "Verify a fresh owner signature and reveal card credentials"
method: POST
path: "/api/cards/{id}/reveal"
---

# Verify a fresh owner signature and reveal card credentials

`POST /api/cards/{id}/reveal`

## Request

- Base URL: `https://api.x402card.org`
- URL: `https://api.x402card.org/api/cards/{id}/reveal`
- Auth: HTTP bearer

Sensitive response. Agent clients should deliver it through a secure local presenter and exclude it from model context.

## Path parameters

- `id` string, uuid, required

## Response `200`

No-store sensitive credential response

## Other responses

- `401`: Invalid, expired or consumed challenge

---

[API](https://skmtc.dev/x402card/apis/x402card-virtual-cards-and-freeland-esim-api.md) · [All operations](https://skmtc.dev/x402card/apis/x402card-virtual-cards-and-freeland-esim-api/llms.txt) · [OpenAPI document](https://skmtc.dev/x402card/apis/x402card-virtual-cards-and-freeland-esim-api/revisions/90ffb84a664e?raw)